Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3,420

Export CSV
CVE-2015-1099

Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app.

CVSS 2.0 · 4.0 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Iphone Os Mac Os X Tvos
CVE-2015-1200

Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Pxz Project
Products
Pxz
CVE-2015-1234

chromium-browser: buffer overflow via race condition in GPU

Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed
Vendors
Apple Google Linux and 2 more
Products
Macos Chrome Linux Kernel and 2 more
CVE-2015-4203

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.

CVSS 2.0 · 5.4 Medium EPSS 2.2% KEV · Not listed
Vendors
Cisco
Products
Ios Ubr10000 Cable Modem Termination System
CVE-2015-5189

pcs: Incorrect authorization when using pcs web UI

Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Pacemaker\/corosync Configuration System Project Redhat
Products
Pacemaker\/corosync Configuration System Enterprise Linux
CVE-2015-5240

openstack-neutron: Firewall rules bypass through port update

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group rules are applied.

CVSS 2.0 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2015-6761

chromium-browser: Memory corruption in FFMpeg

The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.

CVSS 2.0 · 6.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Ffmpeg Google Redhat
Products
Ffmpeg Chrome Rhel Extras
CVE-2015-6789

chromium-browser: Use-after free in Blink

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion.

CVSS 2.0 · 9.3 Critical EPSS 1.7% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2015-7613

kernel: Unauthorized access to IPC objects with SysV shm

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus and 1 more